Skip to content
OpenAdvisories
High ICSA-24-247-01 10 CVEs

LOYTEC Electronics LINX Series

Published Sep 3, 2024 · Updated Sep 3, 2024

Vendor: LOYTEC electronics Product: L-INX Configurator Product: LINX-151 Product: LINX-212 Product: LIOB-580 V2 Product: LIOB-586 Product: LIOB-588 Product: LVIS-3ME12-A1

Summary

Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information or make modifications to an affected device.

Vulnerabilities 10

  • High 7.5
    CVE-2023-46380

    LOYTEC LINX-151, LINX-212, LVIS-3ME12-A1, LIOB-586, LIOB-580 V2, LIOB-588, L-INX Configurator devices (all versions) se…

  • Unscored —
    CVE-2023-46381

    LOYTEC LINX-151, LINX-212, LVIS-3ME12-A1, LIOB-586, LIOB-580 V2, LIOB-588, L-INX Configurator devices (all versions) la…

  • Unscored —
    CVE-2023-46382

    LOYTEC LINX-151, LINX-212, LVIS-3ME12-A1, LIOB-586, LIOB-580 V2, LIOB-588, L-INX Configurator devices (all versions) us…

  • Unscored —
    CVE-2023-46383

    LOYTEC electronics GmbH LINX Configurator (all versions) uses HTTP Basic Authentication, which transmits usernames and …

  • Unscored —
    CVE-2023-46384

    LOYTEC electronics GmbH LINX Configurator (all versions) is vulnerable to Insecure Permissions. Cleartext storage of cr…

  • Unscored —
    CVE-2023-46385

    LOYTEC electronics GmbH LINX Configurator (all versions) is vulnerable to Insecure Permissions. An admin credential is …

  • Unscored —
    CVE-2023-46386

    LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Insecure Permissions via registr…

  • Unscored —
    CVE-2023-46387

    LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Incorrect Access Control via dpa…

  • Unscored —
    CVE-2023-46388

    LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Insecure Permissions via dpal_co…

  • Unscored —
    CVE-2023-46389

    LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Incorrect Access Control via reg…

Revision history

  1. #1

    Initial Publication

References